This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a393030303a3a2f33362d3336203d3e20323639373832.roa File: 323830333a323336303a393030303a3a2f33362d3336203d3e20323639373832.roa (raw, json) Hash identifier: o5KIe1eCJaq4ZG0YF8kTlnNXWLuw9OBxiy0HVsy12nY= Subject key identifier: BE:49:0C:14:F8:46:DE:9F:9B:D1:E2:D3:E0:EA:C0:11:0C:9D:8A:C4 Certificate issuer: /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1 Certificate serial: 1F0D5A44D64C0877B771A028F943EF1172F809C2 Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a393030303a3a2f33362d3336203d3e20323639373832.roa Signing time: Tue 06 Jan 2026 19:12:27 +0000 ROA not before: Tue 06 Jan 2026 19:07:27 +0000 ROA not after: Tue 05 Jan 2027 19:12:27 +0000 asID: 269782 IP address blocks: 2803:2360:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:0d:5a:44:d6:4c:08:77:b7:71:a0:28:f9:43:ef:11:72:f8:09:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1 Validity Not Before: Jan 6 19:07:27 2026 GMT Not After : Jan 5 19:12:27 2027 GMT Subject: CN=BE490C14F846DE9F9BD1E2D3E0EAC0110C9D8AC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9c:57:63:33:8b:1e:68:34:3b:f5:eb:db:8f: bf:bf:e2:3e:79:fb:0d:f9:e5:97:40:aa:fe:45:25: 73:64:43:c0:a3:56:01:8f:92:c2:c7:3f:b8:5d:9c: 7c:67:92:ec:12:00:df:48:86:3f:b7:64:e9:27:d5: 44:41:0f:59:15:19:e0:eb:20:6f:f8:fc:f7:c5:99: 14:18:b9:c5:80:56:6a:a4:b7:d2:32:4a:2c:a9:34: 2a:18:7e:57:1b:d2:fc:4a:38:20:c8:dc:9c:50:c7: 29:76:fc:6d:9e:9c:af:9b:9a:44:88:6d:d3:f7:30: ed:10:b9:75:9e:f3:62:3a:57:42:3e:22:d8:b1:cc: 64:5d:8c:a2:40:54:b1:ce:64:e9:a3:15:ff:a0:19: 32:e3:58:24:d8:10:92:b5:d8:48:da:09:48:9b:ce: 9b:b5:d4:67:0f:d5:1c:84:c9:59:a7:d8:1f:a6:62: ee:1d:f3:6e:c6:e1:7d:65:e8:75:bd:55:c0:da:10: ff:ee:d6:86:01:2b:37:c1:7e:7e:f4:bd:7b:97:86: 2d:03:48:cb:97:8a:e1:60:cf:fe:2a:11:1f:29:3e: 67:a0:bf:50:13:fa:27:fa:e3:53:40:35:5a:2f:2d: 9f:60:53:c7:db:47:bb:7a:c6:63:26:f9:f1:d6:eb: ad:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:49:0C:14:F8:46:DE:9F:9B:D1:E2:D3:E0:EA:C0:11:0C:9D:8A:C4 X509v3 Authority Key Identifier: keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a393030303a3a2f33362d3336203d3e20323639373832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2360:9000::/36 Signature Algorithm: sha256WithRSAEncryption 87:6d:96:8c:1b:be:64:58:45:5c:19:aa:73:e2:3f:39:f7:aa: 69:5d:b4:e8:72:41:1e:13:83:f5:28:ce:72:fa:e9:ca:27:5d: 56:55:16:bb:41:ff:1d:ca:97:c1:29:51:01:b2:45:db:2b:4d: 81:80:8f:f4:6a:8b:71:12:af:7c:c0:c1:ad:c1:8c:ae:7a:b0: 6b:2c:d4:81:df:8f:14:9d:26:85:51:5e:9a:c9:60:21:74:7b: da:b5:42:d4:3b:7e:11:09:87:dd:66:fe:1a:e6:77:21:a7:4f: 72:ce:6e:89:4d:dd:f2:c1:10:9d:37:8a:3d:d2:37:07:3c:ea: 76:6f:9f:5b:e1:7b:b7:e6:aa:44:9c:5f:4b:5e:aa:3f:dd:18: 6c:8b:dd:61:ca:58:fc:b9:f9:dd:e3:6c:f1:44:ee:f6:6d:a0: 62:ef:95:51:5d:95:0c:c4:62:4f:a8:af:6d:c4:e5:08:49:6a: 6e:77:1b:14:73:a7:d4:d2:c3:41:10:ee:8b:ea:0e:14:c7:6e: 5e:15:c0:7a:40:85:10:02:e4:85:d4:3b:81:01:8e:85:ec:1a: be:ec:83:6e:94:a1:9c:fc:98:f6:0e:57:6a:55:4c:0c:58:34: ca:61:ca:6d:49:84:1b:8d:c4:73:93:41:ac:26:ae:96:90:e3: 94:97:8c:a1 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUHw1aRNZMCHe3caAo+UPvEXL4CcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBNTFBMDRCN0Q5MjBEMTgwNkYwN0IwRjc3RDE0M0Ix QzdGQUFFMTAeFw0yNjAxMDYxOTA3MjdaFw0yNzAxMDUxOTEyMjdaMDMxMTAvBgNV BAMTKEJFNDkwQzE0Rjg0NkRFOUY5QkQxRTJEM0UwRUFDMDExMEM5RDhBQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPnFdjM4seaDQ79evbj7+/4j55 +w355ZdAqv5FJXNkQ8CjVgGPksLHP7hdnHxnkuwSAN9Ihj+3ZOkn1URBD1kVGeDr IG/4/PfFmRQYucWAVmqkt9IySiypNCoYflcb0vxKOCDI3JxQxyl2/G2enK+bmkSI bdP3MO0QuXWe82I6V0I+ItixzGRdjKJAVLHOZOmjFf+gGTLjWCTYEJK12EjaCUib zpu11GcP1RyEyVmn2B+mYu4d827G4X1l6HW9VcDaEP/u1oYBKzfBfn70vXuXhi0D SMuXiuFgz/4qER8pPmegv1AT+if641NANVovLZ9gU8fbR7t6xmMm+fHW662dAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUvkkMFPhG3p+b0eLT4OrAEQydisQwHwYDVR0j BBgwFoAUAaUaBLfZINGAbwew930UOxx/quEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NEQxNkE1NTY1OThGNzRBQURCNzc1RERDQ0ExMjE0ODhD RDMzQjM2NTkwOUU3QUZGNzZENTQxRkZDQUZEQzIzLzAvMDFBNTFBMDRCN0Q5MjBE MTgwNkYwN0IwRjc3RDE0M0IxQzdGQUFFMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMUE1MUEwNEI3RDkyMEQxODA2 RjA3QjBGNzdEMTQzQjFDN0ZBQUUxLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjREMTZBNTU2NTk4Rjc0QUFEQjc3NUREQ0NBMTIxNDg4Q0QzM0IzNjU5 MDlFN0FGRjc2RDU0MUZGQ0FGREMyMy8wLzMyMzgzMDMzM2EzMjMzMzYzMDNhMzkz MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzNzM4MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQoAyNgkDANBgkqhkiG9w0BAQsFAAOCAQEAh22WjBu+ZFhFXBmqc+I/Ofeq aV206HJBHhOD9SjOcvrpyiddVlUWu0H/HcqXwSlRAbJF2ytNgYCP9GqLcRKvfMDB rcGMrnqwayzUgd+PFJ0mhVFemslgIXR72rVC1Dt+EQmH3Wb+GuZ3IadPcs5uiU3d 8sEQnTeKPdI3Bzzqdm+fW+F7t+aqRJxfS16qP90YbIvdYcpY/Ln53eNs8UTu9m2g Yu+VUV2VDMRiT6ivbcTlCElqbncbFHOn1NLDQRDui+oOFMduXhXAekCFEALkhdQ7 gQGOhewavuyDbpShnPyY9g5XalVMDFg0ymHKbUmEG43Ec5NBrCaulpDjlJeMoQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:09:25 2026 by rpki-client